popup

Submissions

No Date Request Urls Hosts IDS Rule Score Zero VT Player Etc
9091 2021-06-22 09:41 dl.php.doc  

2775135ed5569787e253e62a238b1358


Gen2 OS Processor Check MSOffice File unpack itself DNS 		1.8 ZeroCERT

9092 2021-06-22 09:42 dl.php.vbs  

45ad07c4795ff6b95f6b5c60b9fa8fc2

crashed 		0.2 ZeroCERT

9093 2021-06-22 09:43 M0031.cab  

3b211b5eb6787043deba29c207c37bb0


Escalate priviledges KeyLogger AntiDebug AntiVM suspicious privilege Check memory Checks debugger unpack itself DNS 		2.2 ZeroCERT

9094 2021-06-22 10:18 file.exe  

e0c4171c0bb82cf52647b0ccbfd6f3e3


Generic Malware Admin Tool (Sysinternals etc ...) PE File OS Processor Check PE32 VirusTotal Malware PDB unpack itself Windows Remote Code Execution crashed 		3.4 33 r0d

9095 2021-06-22 11:14 tbCgXlQIMjI1kIcB.jpg.ps1  

55dae81112baf10e1cdbfad99c922ce8


Antivirus VirusTotal Malware Check memory unpack itself WriteConsoleW Windows DNS Cryptographic key 		2.0 1 ZeroCERT

9096 2021-06-22 11:20 GT2pFbB.dll  

4e5fc6111da7ec4512257864ded2f43b


Generic Malware UPX Malicious Library PE File PE64 DLL VirusTotal Malware crashed 		1.2 5 r0d

9097 2021-06-22 12:14 purchase order.exe  

43955364f71a38a2af68a9c85ce5c7af


AsyncRAT backdoor PWS .NET framework Generic Malware Malicious Packer SMTP KeyLogger AntiDebug AntiVM PE File .NET EXE PE32 VirusTotal Malware suspicious privilege Code Injection Check memory Checks debugger buffers extracted Creates executable files unpack itself Windows utilities suspicious process AppData folder WriteConsoleW Windows ComputerName DNS crashed 		12.2 24 ZeroCERT

9098 2021-06-22 12:20 BNTS_CHT_ONLNE.msi  

22d9cae00205d10fdddde71ca75ebc02


Gen2 Antivirus OS Processor Check MSOffice File VirusTotal Malware suspicious privilege Check memory Checks debugger unpack itself AntiVM_Disk VM Disk Size Check ComputerName DNS 		3.0 12 ZeroCERT

9099 2021-06-22 13:54 プロフォーマインボイス pdf.exe  

88b341b9e1d4b70baaa827d7b06e2456


PE File PE32 VirusTotal Malware Check memory RWX flags setting unpack itself anti-virtualization DNS 		1 4 3.2 19 ZeroCERT

9100 2021-06-22 15:24 プロフォーマインボイス pdf.exe  

88b341b9e1d4b70baaa827d7b06e2456


Admin Tool (Sysinternals etc ...) PE File PE32 VirusTotal Malware Check memory RWX flags setting unpack itself anti-virtualization 		2.2 19 r0d

9101 2021-06-22 15:31 http://122.114.198.100/www/vbc...  

5beae2f6cea2c9f92ab4e2b34dfac0d4


PWS .NET framework Generic Malware Admin Tool (Sysinternals etc ...) Malicious Library DGA DNS Socket Create Service Sniff Audio HTTP Escalate priviledges KeyLogger FTP Hijack Network Code injection Http API Internet API Steal credential ScreenShot Downlo Malware download VirusTotal Malware Code Injection Malicious Traffic Creates executable files exploit crash unpack itself Windows utilities AppData folder malicious URLs Tofsee Windows Exploit DNS crashed Downloader 		1 1 6 6.0 35 guest

9102 2021-06-22 18:08 .................................  

f418946469f4edf5fd007c9767eeb14b


RTF File doc LokiBot Malware download VirusTotal Malware c&c Malicious Traffic exploit crash unpack itself Windows Exploit DNS crashed Downloader 		2 3 15 4.4 27 ZeroCERT

9103 2021-06-22 18:09 vbc.exe  

357e95c47c4b8666b0fe33277a37f376


PE File PE32 VirusTotal Malware Check memory RWX flags setting unpack itself Remote Code Execution DNS crashed 		3.4 33 ZeroCERT

9104 2021-06-22 18:10 vbc.exe  

8da587a72663d0312b35d53f4d45735c


PE File PE32 DLL Browser Info Stealer LokiBot Malware download FTP Client Info Stealer VirusTotal Email Client Info Stealer Malware c&c suspicious privilege MachineGuid Malicious Traffic Check memory Creates executable files unpack itself AppData folder installed browsers check Browser Email ComputerName DNS Software 		1 2 9 8.2 18 ZeroCERT

9105 2021-06-22 18:13 prince_of_persia_P_v4_x86.exe  

28906318e1bfa9949cd086e807a0f220


AsyncRAT backdoor Generic Malware PE File OS Processor Check PE32 VirusTotal Malware suspicious privilege Code Injection Malicious Traffic Check memory Checks debugger buffers extracted unpack itself Windows utilities Check virtual network interfaces WriteConsoleW Tofsee Windows ComputerName DNS Cryptographic key 		20 2 1 6.4 34 ZeroCERT

keyword